CVE-2024-22283

Summary

CVE-2024-22283 is a newly disclosed SQL injection vulnerability affecting Delhivery Logistics Courier. The issue stems from Delhivery's failure to neutralize special elements in SQL commands, leading to potential unauthorized access to their database. This vulnerability, present in Delhivery Logistics Courier versions from n/a through 1.0.107, could pose a significant risk to sensitive data if exploited successfully. A successful attacker could execute arbitrary SQL statements, potentially leading to data theft, modification, or destruction. It is crucial for Delhivery to address this vulnerability promptly by implementing proper input validation and sanitization techniques to secure their database against SQL injection attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.